2024

Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user

A Cross-Site Scripting (XSS) vulnerability has been found in HelpDeskZ affecting version 2.0.2 and earlier. This vulnera

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected

A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the f

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affec

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all i

Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A

Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co

The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce pl

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows

Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <=

Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n

A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.

In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.

The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injec

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attac

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.

Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbo

IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges

IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse director

IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an a

IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by defaul

IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an a

IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users t

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied d

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnera

Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affect

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affe

Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the appli

dp-golang is a Puppet module for Go installations. Prior to 1.2.7, dp-golang could install files — including the compil

In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcp_sock_bind/connect

In the Linux kernel, the following vulnerability has been resolved: soc/tegra: regulators: Fix locking up when voltage-

In the Linux kernel, the following vulnerability has been resolved: async_xor: increase src_offs when dropping destinat

In the Linux kernel, the following vulnerability has been resolved: rtw88: Fix array overrun in rtw_get_tx_power_params

In the Linux kernel, the following vulnerability has been resolved: mt76: fix potential DMA mapping leak With buf unin

In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge deta

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use online_vcpus, not created_vcpus, to i

In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure

In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the b

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - fix result memory leak on error

In the Linux kernel, the following vulnerability has been resolved: regmap: set debugfs_name to NULL after it is freed

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - ADF_STATUS_PF_RUNNING should be set a

In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badb

In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child